Summary
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Sophos Firewall ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen oder Dateien zu manipulieren.
Product
Sophos Firewall ist die Firewall-Software für Sophos Appliances.
Vulnerabilities 7
-
Critical 9.8
A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firew…
KEV Sep 23, 2022 -
High 8.8
A code injection vulnerability allows adjacent attackers to execute code in the Wifi controller of Sophos Firewall rele…
-
High 7.2
An OS command injection vulnerability allows admins to execute code via SSL VPN configuration uploads in Sophos Firewal…
-
High 7.2
A post-auth code injection vulnerability allows admins to execute code in Webadmin of Sophos Firewall releases older th…
-
Medium 6.8
A stored XSS vulnerability allows admin to super-admin privilege escalation in the Webadmin import group wizard of Soph…
-
Medium 4.3
A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in…
-
Low 2.7
A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database conte…
Revision history
-
#2
Korrektur
-
#1
Initiale Fassung
References
-
Sophos Security Advisory vom 2022-12-01
https://www.sophos.com/en-us/security-advisories/sophos-sa-20221201-sfos-19-5-0